Tenable
Tenable provides an AI-powered exposure management platform that unifies vulnerability, cloud, identity, OT, and AI security for over 40,000 global customers, generating approximately $1.07B in FY2026 guided revenue primarily through recurring subscriptions.
- Company typePublic
- Founded2002
- HeadquartersColumbia, United States
- Headcount1,001–5,000
- GTM typeB2B
- OfferingSoftware
What Tenable does
Tenable Holdings, Inc. (NASDAQ: TENB) is a publicly traded cybersecurity company that provides an AI-powered exposure management platform to help organizations identify, prioritize, and remediate cyber risks across IT, cloud, identity, OT, IoT, web applications, and AI environments. Founded in 2002 and headquartered in Columbia, Maryland, Tenable built its early reputation on Nessus, the industry-leading vulnerability scanner, and has since evolved into a platform company anchored by Tenable One, which unifies modules for vulnerability management, cloud security (CNAPP, including DSPM, CSPM, CIEM, and AI-SPM), identity security, OT/ICS security, attack surface management, web application scanning, and patch management. The platform is orchestrated by Tenable Hexa AI, an agentic AI engine using the Model Context Protocol, and grounded in the Exposure Data Fabric, which ingests native sensors plus more than 330 third-party connectors via the Open Partner Exchange Network (OPEN). Tenable Research publishes Tenable Research tracks 355 additional exploited-in-the-wild vulnerabilities beyond CISA KEV's 1,569 entries with a median lead time of 3.2 days; Nessus covers 110,000+ vulnerabilities; ASM map spans 5+ billion assets.
The company generates revenue primarily through recurring subscriptions, with 96% of revenue recurring, and serves more than 40,000 global customers including Fortune 500 firms, federal agencies (notably a $50M DHS IoT contract in Q1 2025), and large enterprises in regulated industries. Tenable distributes through direct enterprise field sales, a global channel network (Deloitte, Atos, eSentire, CDW), and self-serve e-commerce for Nessus and Vulnerability Management SKUs. The company's go-to-market is anchored by analyst recognition as a Leader across Gartner, IDC, and Forrester for exposure management, and most recently by strategic partnerships with Anthropic (May 2026) and OpenAI (June 2026) to embed frontier AI capabilities into the Tenable One platform.
Tenable's growth has been driven by a combination of organic product expansion and strategic M&A, having completed acquisitions including Alsid ($98M, 2021), Accurics ($160M, 2021), Bit Discovery ($44.5M, 2022), Cymptom (2022), Ermetic ($240M, 2023), Eureka Security (2024), Vulcan Cyber ($150M, 2025), and APEX (2025). With FY2025 revenue of approximately $1.02 billion, Q1 2026 revenue of $262.1 million (+9.6% YoY), and FY2026 guidance of $1.068–$1.078 billion, Tenable is operating at scale with strong free cash flow generation (33.8% of revenue in Q1 2026) while transitioning to a platform-led, AI-native exposure management model.
Tenable firmographics
Firmographics- Name
- Tenable
- Legal name
- Tenable Holdings, Inc.
- Website
- https://tenable.com
- Company type
- Public
- Founded year
- 2002
- Operating status
- Operating
- Headcount range
- 1,001–5,000 employees
- Short description
- Tenable provides an AI-powered exposure management platform that unifies vulnerability, cloud, identity, OT, and AI security for over 40,000 global customers, generating approximately $1.07B in FY2026 guided revenue primarily through recurring subscriptions.
- Ownership category
- akta.pro rank
Tenable industry classification
Industry- Product category
- Cybersecurity Exposure Management
- NAICS
- Software Publishers (5132), Security Systems Services (except Locksmiths) (561621), Computer Storage Device Manufacturing (334112)
- SIC
- Services-Computer Integrated Systems Design (7373), Electronic Components & Accessories (3670), Computer Peripheral Equipment, Nec (3577)
- akta.pro primary industry
- Responsible AI, Security & Privacy Platforms (Safety, Guardrails, PII) (HDAEANAG)
- akta.pro secondary industries
- OT Threat Detection & Monitoring (NDR/IDS for ICS) (HDADAJAF), Remote Access & Privileged Access for OT (ZTA/PAM for Vendors) (HDADAJAG)
Keywords
Where Tenable is headquartered
LocationHeadquarters
- HQ city
- Columbia
- HQ country
- United States
- HQ region
- North America
Offices21 records
Markets served
Tenable business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Marketing or Sales, Operations, Infrastructure
Revenue model
- Tenable One Platform Subscription: Recurring subscription revenue from Tenable One Foundation and Advanced packages providing exposure management across IT, cloud, identity, OT, and AI domains. Subscription accounted for the vast majority of overall revenue per Q1 2024 commentary, with ~96% recurring revenue base and 78% gross profit margin on Tenable One platform.
- Nessus Professional and Expert Licenses: Multi-year perpetual and subscription licenses for Tenable Nessus Professional ($4,790/yr) and Nessus Expert ($6,790/yr), including option to add Advanced Support ($400) and On-Demand Training.
- Tenable Vulnerability Management Subscription: Asset-based annual subscription priced per asset ($3,700/yr for 100 assets base) with multi-year discounts, sold direct or via partners for cloud-managed vulnerability management.
- Tenable Web App Scanning Subscription: Per-FQDN subscription ($5,250 for 5 FQDNs/yr) for dynamic application security testing integrated into Tenable One.
- Advanced Support and Training Services: Optional add-on support ($400 Advanced Support per Nessus license with 24x7 phone, chat, email, and community support) and on-demand training courses ($275 Nessus Fundamentals, $385 Nessus Advanced) bundled with software.
- Tenable Open Partner Ecosystem (OPEN) and One Open Connector: Bi-directional data exchange platform revenue through the Tenable One Open Connector and integration ecosystem with 330+ validated partners, including Recorded Future, Bitsight, and Splunk, that ingest third-party telemetry into Tenable One.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| One time/ perpetual license | Annual | Tenable Nessus Professional - 1 year license at $4,790 |
| One time/ perpetual license | Annual | Tenable Nessus Expert - 1 year license at $6,790 |
| Subscription | Annual | Tenable Vulnerability Management - 1 year subscription starting at $3,700 |
| Subscription | Annual | Tenable Web App Scanning - per-FQDN subscription at $5,250/yr for 5 FQDNs |
| Subscription | Multi-year contract | Tenable One Foundation and Advanced packages - quote-based |
| Freemium | Pay-as-you-go | Tenable Vulnerability Management and Nessus trials - free |
Go-to-market motion5 records
Distribution channels6 records
Marketing channels10 records
Tenable product offering
Product offeringCore offering
Tenable sells an AI-powered exposure management platform (Tenable One) that unifies vulnerability management, cloud security, identity security, OT security, web app scanning, attack surface management, and AI security on a single Exposure Data Fabric. The platform is orchestrated by Tenable Hexa AI, an agentic AI engine, and is sold via subscription to enterprise and public-sector customers globally. Standalone vulnerability assessment scanners (Nessus Professional and Expert) and on-premises products (Tenable Security Center, Tenable Enclave Security) are also sold, with the vast majority of revenue derived from recurring subscriptions.
Product overview
Tenable offers a platform-plus-modules architecture anchored by Tenable One, the leading AI-powered exposure management platform that unifies security visibility, insight, and action across the modern attack surface (IT, cloud, identity, OT, IoT, web apps, AI). Tenable One is delivered via two package tiers (Foundation and Advanced) and bundles or integrates with specialized modules: Tenable One AI Exposure, Tenable One Cloud Exposure (CNAPP, including Cloud Vulnerability Management, Cloud CIEM, and Just-in-Time Access), Tenable One OT Exposure, Tenable One Identity Exposure, Tenable One Attack Surface Management (Tenable.asm), Tenable One Web App Scanning, and Tenable One Vulnerability Management. The platform is orchestrated by Tenable Hexa AI, the agentic AI engine, and enriched by the Tenable Exposure Data Fabric with over 330 third-party connectors through the Open Partner Exchange Network (OPEN). Standalone products include Tenable Nessus (Professional and Expert) for vulnerability assessment, Tenable Security Center for on-premises vulnerability management, Tenable Patch Management (powered by Adaptiva), Tenable Enclave Security for classified/air-gapped environments, Tenable PCI ASV, and Tenable Cloud Security (including DSPM, CSPM, and CIEM). Earlier-acquired brands include Accurics (IaC security) and the Bit Discovery-derived Tenable.asm. The platform is designed to address exposure management under the CTEM framework for over 40,000 global customers.
Differentiator
Problem solved
Functional benefit
Brands
- Tenable One: AI-powered exposure management platform unifying security visibility, insight, and action across the attack surface
- Tenable Nessus
- Tenable Vulnerability Management
- Tenable Patch Management
- Tenable Web App Scanning
- Tenable OT Security
- Tenable Identity Exposure
- Tenable Cloud Security
- Tenable Attack Surface Management
- Tenable.asm
Products and services
- Tenable One Exposure Management Platform AI-powered exposure management platform that unifies security visibility, insight, and action across IT, cloud, identity, OT, web apps, and AI surfaces, with native signals, exposure intelligence, and 330+ third-party data connectors on the Exposure Data Fabric. Sold to enterprise and public-sector customers as Foundation and Advanced subscription packages.
- Tenable Hexa AI Agentic AI orchestration engine inside Tenable One that uses the Model Context Protocol to automate multi-step security workflows, supports pre-built and custom AI agents, and turns exposure intelligence into coordinated action at machine speed with human-in-the-loop controls.
- Tenable One AI Exposure Module of Tenable One that provides visibility, context, and control over enterprise AI use, governing AI platforms (OpenAI ChatGPT Enterprise, Microsoft Copilot, 365 Copilot, Studio Copilot), enforcing AI acceptable use policies, and detecting prompt injection and jailbreak attempts.
- Tenable One Cloud Exposure (CNAPP) Cloud-native application protection platform (CNAPP) unifying CSPM, CIEM, DSPM, AI-SPM, KSPM, CWPP, IaC scanning, attack path analysis, and cloud detection and response to close cloud exposure across AWS, Azure, and GCP.
- Tenable One OT Exposure Module for converged OT/IT environments that combines passive monitoring and patented Safe Active Querying with exposure intelligence to provide asset inventory, vulnerability management, configuration control, threat detection, and attack path analysis for cyber-physical systems.
- Tenable One Identity Exposure Identity security module that unifies human and machine identities across Active Directory and Entra ID, visualizes trust paths and delegation chains, maps attack paths, and detects Indicators of Attack (DCSync, Kerberoasting, Golden Ticket, DCShadow, Brute Force, Password Spraying) in real time.
- Tenable One Attack Surface Management (Tenable.asm) External attack surface management (EASM) solution that continuously maps the internet and identifies more than 5 billion internet-facing assets and services with 200+ metadata fields for security and compliance teams.
- Tenable One Web App Scanning Dynamic application security testing (DAST) solution that scans modern web applications and APIs for OWASP Top 10 risks, vulnerable third-party components, and misconfigurations, available as SaaS or on-prem via Tenable Security Center.
- Tenable One Vulnerability Management Cloud-based vulnerability management solution providing continuous asset discovery, predictive Vulnerability Priority Rating (VPR), contextual vulnerability intelligence, and integrated remediation workflows, powered by Nessus technology.
- Tenable Patch Management Patch management module powered by Adaptiva that pairs Tenable's prioritization with autonomous patch functionality across Windows, Mac, and Linux (250,000+ patches, 20,000+ third-party applications) with configurable SLAs and guardrails.
- Tenable Enclave Security Vulnerability management solution built for highly secure, air-gapped, FedRAMP High, and Impact Level 5 environments, providing continuous discovery and analysis of IT and container assets and prioritization of high-risk vulnerabilities.
- Tenable Nessus Professional Industry-leading vulnerability assessment scanner ($4,790/yr) with real-time vulnerability updates, unlimited scanning, pre-built policies for configuration and compliance audits, vulnerability scoring, and flexible deployment.
- Tenable Nessus Expert Premium Nessus tier ($6,790/yr) that expands vulnerability assessment with web app scanning and external attack surface discovery scanning capabilities.
- Tenable Security Center On-premises vulnerability management solution providing a comprehensive view of network assets and vulnerabilities with risk-based prioritization and compliance reporting.
- Tenable PCI ASV PCI Approved Scanning Vendor solution integrated with Tenable Vulnerability Management and Web App Scanning that streamlines quarterly PCI DSS 4.0 scanning and attestation.
- Tenable One Continuous Security Control Validation Feature addition to Tenable One that extends continuous security control and validation by linking control visibility with threat intelligence and attack feasibility, enabling organizations to determine which vulnerabilities are actually exploitable versus already mitigated by existing defenses.
Companies that use Tenable
Customer profileNamed customers7 records
Segments8 records
Ideal customer profiles6 records
Tenable technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration28 records
AI capability4 records
Feature9 records
Tenable partnerships and signals
Strategic signalPartnerships
21 partnerships are on record, tiered flagship, core and minor.
- OpenAIflagshipTenable joined the OpenAI Daybreak Cyber Partner Program combining OpenAI's GPT-5.5 frontier AI capabilities with Tenable's exposure management platform. The collaboration focuses on advancing cybersecurity research, accelerating identification of exploitable exposures and attack paths, and streamlining security operations. Together they target the growing asymmetry as AI accelerates attacker capabilities, with Tenable evaluating generative AI for defensive workflows. Stock impact: shares rose 4.8% on announcement.
- Hitachi and Dragos (via Anthropic Project Glasswing)coreAnthropic admitted Tenable, Hitachi, and Dragos to its Project Glasswing initiative, granting access to its Mythos large language model for operational technology (OT) security use cases. The restricted-access program has drawn criticism from broader OT security community.
- Recorded Future, Bitsight, Splunk (OPEN founding partners)flagshipFounding ecosystem partners in the Tenable Open Partner Exchange Network (OPEN), contributing intelligence and telemetry capabilities to the 330+ integration ecosystem. The OPEN platform introduces bi-directional data exchange via the Tenable One Open Connector to unify security data and accelerate AI-driven workflows.
- Anthropic Claude Enterprise Compliance API Integrations (28 partners)flagshipTenable is one of 28 Anthropic launch partners (alongside CrowdStrike, Palo Alto Networks, Microsoft Purview, Cloudflare, Zscaler, Okta, Fortinet, Netskope) for the Claude Enterprise Compliance API that routes AI activity into existing SIEM and DLP tools across categories including DLP, SIEM, SASE, and identity management.
- AnthropicflagshipStrategic partnership to integrate Anthropic's Claude AI capabilities into Tenable Hexa AI agentic engine within the Tenable One Exposure Management Platform, announced at the EXPOSURE 2026 conference in Boston. Focuses on exposure prioritization, remediation orchestration, and exposure analysis across modern attack surfaces. Anthropic participates in EXPOSURE 2026. The Claude Compliance API integration enables AI governance for EU AI Act compliance.
- DeloitteflagshipDeloitte was named Tenable's 2026 Global System Integrator of the Year at the Tenable AssureWorld virtual partner conference for outstanding contributions to driving adoption of the Tenable One Exposure Management Platform.
- AtosflagshipAtos was named Tenable's 2026 Service Delivery Partner of the Year for driving Tenable One platform adoption across enterprise engagements.
- eSentireflagshipeSentire was named Tenable's 2026 MSSP Partner of the Year for excellence in delivering managed security services built on the Tenable One Exposure Management Platform.
- CDWcoreCDW named Tenable's 2026 Public Sector Partner of the Year for driving Tenable One platform adoption across federal, state, and local government customers.
- Cyber CXcoreCyber CX named Tenable's 2026 APJ regional Partner of the Year for driving exposure management adoption across Australia and APJ markets.
- ControlwarecoreControlware named Tenable's 2026 EMEA regional Partner of the Year for driving Tenable One platform adoption across enterprise and public sector customers in EMEA.
- Total Cyber-SecminorTotal Cyber-Sec named Tenable's 2026 Latin America regional Partner of the Year for driving exposure management adoption in the LatAm region.
- GuidepointcoreGuidepoint named Tenable's 2026 North America regional Partner of the Year for driving Tenable One platform adoption across enterprise customers in North America.
- Eureka Security (acquisition agreement)flagshipTenable announced acquisition of Eureka Security, a provider of data security posture management (DSPM), expected to close in June 2024. The acquisition enhances Tenable's cloud security platform with DSPM capabilities for security and compliance in cloud environments.
- Bit Discovery (acquired by Tenable)flagshipTenable completed the acquisition of Bit Discovery (external attack surface management leader) in 2022 for $44.5 million in cash and launched Tenable.asm to enhance visibility of internet-facing assets. Bit Discovery's EASM technology is now part of Tenable One Attack Surface Management.
- Accurics (acquired by Tenable)flagshipTenable completed acquisition of Accurics on October 1, 2021 for approximately $160 million in cash. Accurics specialized in Infrastructure as Code (IaC) security assessment tools, and the acquisition enhanced Tenable's cloud-native security and risk management capabilities.
- SentinelOnecoreTenable One connector for SentinelOne consolidates endpoint asset and risk data from SentinelOne with broader risk insights for a complete exposure view within Tenable One.
- TaniumcoreTenable One connector for Tanium consolidates Tanium endpoint asset and risk data with broader exposure insights for unified visibility of system vulnerabilities within Tenable One.
- Wiz (Cloud Configurations and Issues)coreTwo Tenable One connectors (Wiz Cloud Configurations and Wiz Issues) consolidate Wiz's cloud asset, configuration, and security issue data with broader risk insights for unified views of cloud exposure and container risk within Tenable One.
- AdaptivaflagshipAdaptiva powers Tenable Patch Management, providing autonomous endpoint management and 250,000+ patches across Windows, Mac, and Linux with 20,000+ third-party applications. Adaptiva processes and tests patches prior to publishing, auto-blocking risky updates.
- India Channel Partners (via OPEN program)coreTenable India Country Manager Rajnish Gupta leads expansion of the OPEN program in India, shifting Indian channel partners from technology implementers to strategic security and compliance advisors. The initiative leverages over 330 validated integrations with open APIs, SDKs, and the pyTenable Python library to push partners toward integration-led and managed security services models addressing India's DPDP Act and multi-cloud, OT, and AI-driven environments.
Scale indicators14 records
Recent moves8 records
Expansion highlights7 records
Tenable competitors and assessment
Company assessmentMarket position
Competitive moat7 records
Key risks5 records
Key highlights7 records
Customer concentration
Tenable social profiles
Digital presenceTenable compliance and trust
Trust signalCompliance2 records
Tenable financial estimates
Financial estimateRevenue estimate
Valuation estimate
Tenable leadership team
Management profileNumber of profiles
Profiles15 records
Tenable subsidiaries and ownership
Company hierarchySubsidiaries3 records
Tenable funding detail
Funding detailFunding overview
Funding rounds7 records
Investors5 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Tenable M&A and investment
M&A and investmentM&A11 records
Investments1 record
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Tenable
What does Tenable do?
Tenable sells an AI-powered exposure management platform (Tenable One) that unifies vulnerability management, cloud security, identity security, OT security, web app scanning, attack surface management, and AI security on a single Exposure Data Fabric. The platform is orchestrated by Tenable Hexa AI, an agentic AI engine, and is sold via subscription to enterprise and public-sector customers globally. Standalone vulnerability assessment scanners (Nessus Professional and Expert) and on-premises products (Tenable Security Center, Tenable Enclave Security) are also sold, with the vast majority of revenue derived from recurring subscriptions.
Is Tenable a public or private company?
Tenable is a public company. It is classified as public and is currently operating.
When was Tenable founded?
Tenable was founded in 2002. It employs 1,001 to 5,000 people.
Where is Tenable based?
Tenable is headquartered in Columbia, United States, in the North America region.
How does Tenable make money?
Six revenue lines are on record. Tenable One Platform Subscription is the primary driver. The others are nessus Professional and Expert Licenses, tenable Vulnerability Management Subscription, tenable Web App Scanning Subscription, advanced Support and Training Services and tenable Open Partner Ecosystem (OPEN) and One Open Connector.
Does Tenable have an API?
Yes. Tenable offers public/partner-facing APIs and SDKs through its Tenable Open Partner Exchange Network (OPEN) ecosystem, including open APIs, SDKs, and the pyTenable Python library that enable bi-directional data exchange between Tenable One and third-party security tools. A Model Context Protocol (MCP) server is also exposed through Tenable Hexa AI, allowing customers to build custom AI agents and workflows that integrate with Hexa AI. Technical documentation is available at docs.tenable.com. Developer documentation is at docs.tenable.com.
What industry is Tenable in?
Tenable's product category is Cybersecurity Exposure Management. Its primary akta.pro industry code is HDAEANAG, Responsible AI, Security & Privacy Platforms (Safety, Guardrails, PII), with a secondary code of HDADAJAF, OT Threat Detection & Monitoring (NDR/IDS for ICS). Its NAICS code is 5132 and its SIC code is 7373.